Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: dArxOtQDmmBQ4k3FB2xmKo/sX+oI5NiLD0wFn4m2Ths=
Subject key identifier: 46:2B:FD:8F:32:9B:06:75:87:29:BF:35:C0:A1:A3:68:5C:3B:3C:16
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 019D39410828C4837AF71D252AA9B432D064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 1371
Signing time: Sun 29 Mar 2026 11:00:56 +0000
Manifest this update: Sun 29 Mar 2026 11:00:56 +0000
Manifest next update: Mon 30 Mar 2026 11:00:56 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: +YERf1ujx64GhjSc+r6dyr05o9UR0XuJ1zxAhJlXvf4=)
2: OFBo8WU6Gs7COuii4ORJNULUJs0.roa (hash: oPB/MfmYFXGfvZ50KFNdFr2Mb2PYVu+UQptAAX9J79Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:08:28:c4:83:7a:f7:1d:25:2a:a9:b4:32:d0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Mar 29 11:00:56 2026 GMT
Not After : Mar 30 11:00:56 2026 GMT
Subject: CN=462bfd8f329b06758729bf35c0a1a3685c3b3c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:8e:df:ab:6c:b4:90:fc:e1:bf:93:36:ee:
d5:88:56:20:81:98:32:70:21:95:9d:14:ee:1b:6f:
4b:9f:bb:a0:a9:92:80:ef:c8:5c:72:49:ad:67:e1:
d6:31:b3:d1:56:58:1b:2a:fa:cc:83:d3:98:98:ee:
48:04:1c:33:8c:db:eb:d9:86:4d:39:42:ac:12:96:
cf:e3:3a:cf:35:f0:2a:79:8e:28:ca:ed:0e:ec:f1:
48:0e:81:d7:1a:2b:42:de:16:6c:a3:ef:58:30:1e:
a2:67:c6:01:05:1f:46:a8:4d:1d:32:6f:58:f3:35:
0c:9f:9c:a1:c9:7f:d1:11:26:57:b5:2e:7b:0e:66:
0a:bd:25:b4:67:99:ec:22:2b:6b:d0:67:0b:07:32:
ed:23:25:9f:eb:87:3d:de:dd:d0:e7:a6:5a:0b:c2:
14:9c:ab:b8:17:bd:a2:15:e7:dd:78:56:8d:ca:ff:
2c:d5:58:58:b1:70:1a:b1:4f:62:26:51:b9:1d:77:
91:eb:42:8b:6b:27:ef:a4:e6:58:0e:9d:0a:0b:d3:
9c:ce:7a:8a:a2:a5:75:5c:b5:26:69:f6:b2:85:e4:
94:7f:b4:d8:7d:3f:17:24:0c:13:5e:4c:98:26:bb:
2d:d6:f7:e9:f8:01:51:df:b3:29:19:a3:a9:23:83:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2B:FD:8F:32:9B:06:75:87:29:BF:35:C0:A1:A3:68:5C:3B:3C:16
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:55:84:83:f2:f9:18:37:a9:a4:8a:dc:3b:02:02:85:d4:9e:
d5:ec:89:9c:23:91:9e:33:de:90:d1:64:aa:e3:df:ac:a0:03:
48:61:3c:a5:b6:f2:63:ab:ee:53:33:6c:c3:a7:81:eb:62:5f:
cf:2e:ff:5e:77:e2:34:75:9b:93:bd:49:1d:06:51:6a:b6:1f:
de:a2:f0:15:78:90:8a:9e:21:94:d5:6e:99:b3:ea:74:ee:99:
91:8f:b4:58:6f:b8:a5:1b:79:97:2a:5c:0d:32:1b:15:f3:cb:
a1:0f:c0:45:5e:f2:7a:44:2e:b4:cf:1e:05:9d:bd:86:ce:8a:
16:c9:a1:3e:63:88:84:8b:9f:df:4d:9e:28:80:ed:3d:5f:ea:
a9:28:61:c3:96:20:90:c3:fc:8d:f2:d8:f0:b8:a4:c5:13:32:
f5:00:f6:5f:ac:aa:15:fb:7d:ee:7e:bd:8b:5e:2a:15:3d:be:
52:56:29:b3:8e:1d:e4:0c:a1:7b:83:1e:bb:3d:9f:5b:84:e8:
67:ee:9f:d4:4c:73:73:bc:0c:6a:b1:db:25:a2:0b:fb:34:0e:
5f:4c:e2:c8:61:46:c9:4d:b7:32:11:e2:e5:f1:58:e8:a8:8d:
fa:4c:42:23:cc:a9:27:22:53:3c:d2:df:54:b3:e2:9e:7a:6f:
d6:6a:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:20 2026 by rpki-client